@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/enterprise/attestations/bundle/.agents/skills/omg/test-intent-lock/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/test-intent-lock/openai.yaml",
+      "digest": {
+        "sha256": "62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.160710+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.160710+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "0215df1ca53fe73c",
+    "value": "untrusted comment: signature from omg local signing key\nMzxhyqri95aJrA0iYQ0vg5GBEapztrpiJ40godbAiucQ1qqmewzGqrwrM/7Rx3R9QFH821odiktNp4T0aou5Cw==\ntrusted comment: type=omg-slsa-v1 keyid=0215df1ca53fe73c issued_at=2026-03-11T19:44:52.160820+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/openai.yaml sha256=62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa\nSegErieVqlYr1qiv+hY3LgAUTY5VVynCEgmNTN8luFKgXh/ZbFjqu9W+OSxCWrNOAEAyHzXFAnyLamhKUfpiCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=0215df1ca53fe73c issued_at=2026-03-11T19:44:52.160820+00:00 artifact=bundle/.agents/skills/omg/test-intent-lock/openai.yaml sha256=62934b4eef9e0bd516d7db4864cf178e8367d47c7b5a5f9f883427c633e416fa"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+c2P2O+0XNZHCs8zD7FcAoohrKdnFXGuAriSYXd+SJHWduopEZghRrqMw/va2aUiGhAyzAS+z/WLHXn5rjDRPDg==
+trusted comment: type=omg-slsa-v1 keyid=263e882bb58c8854 issued_at=2026-03-11T19:44:52.161457+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03
+gi030qVq1lFfM4ch2szMwe+ERDQ7y7reZ0uSJUtvc/OaDXskshMgeyWF/bUOLz9OoDuePmglUnnzAVBsCg7QCQ==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/tracebank/SKILL.md",
+      "digest": {
+        "sha256": "5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.161346+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.161346+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "263e882bb58c8854",
+    "value": "untrusted comment: signature from omg local signing key\nc2P2O+0XNZHCs8zD7FcAoohrKdnFXGuAriSYXd+SJHWduopEZghRrqMw/va2aUiGhAyzAS+z/WLHXn5rjDRPDg==\ntrusted comment: type=omg-slsa-v1 keyid=263e882bb58c8854 issued_at=2026-03-11T19:44:52.161457+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03\ngi030qVq1lFfM4ch2szMwe+ERDQ7y7reZ0uSJUtvc/OaDXskshMgeyWF/bUOLz9OoDuePmglUnnzAVBsCg7QCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=263e882bb58c8854 issued_at=2026-03-11T19:44:52.161457+00:00 artifact=bundle/.agents/skills/omg/tracebank/SKILL.md sha256=5bac45273cd62373fb4387f8e64a63c4fb69f984a44ee79938be2273b5913b03"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wyJRl1aI1dTq7aIcGOLlQMBff3DjLfMcPQ3CBbOWF7cdJBF+YRFjGsnOxZvmPLXZmGwpMkyqxRSG3WtuP9JKAg==
+trusted comment: type=omg-slsa-v1 keyid=0e16626285d4d40a issued_at=2026-03-11T19:44:52.162069+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab
+iycSUFXPuaDb3surW9yDMWc2lSZA2+DztTNYO+KmSSGoJ0fC8tedPw9k8y2GfHekr4PzMISmfSSYqbAYz6q4DA==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/tracebank/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/tracebank/openai.yaml",
+      "digest": {
+        "sha256": "5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.161960+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.161960+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "0e16626285d4d40a",
+    "value": "untrusted comment: signature from omg local signing key\nwyJRl1aI1dTq7aIcGOLlQMBff3DjLfMcPQ3CBbOWF7cdJBF+YRFjGsnOxZvmPLXZmGwpMkyqxRSG3WtuP9JKAg==\ntrusted comment: type=omg-slsa-v1 keyid=0e16626285d4d40a issued_at=2026-03-11T19:44:52.162069+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab\niycSUFXPuaDb3surW9yDMWc2lSZA2+DztTNYO+KmSSGoJ0fC8tedPw9k8y2GfHekr4PzMISmfSSYqbAYz6q4DA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=0e16626285d4d40a issued_at=2026-03-11T19:44:52.162069+00:00 artifact=bundle/.agents/skills/omg/tracebank/openai.yaml sha256=5896ef1980b5a13171756eb27f317d3b32b7d084133552f1d11dfea12d8742ab"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+dTSQxVBvp9hHUoZK2kuq6cRLbaP6TB9bSU5sDP5BkDjd6E3M4HTBUGe63va0ANRvkzsxRJOU3CSjbyymDvB3Bg==
+trusted comment: type=omg-slsa-v1 keyid=441e50e7ef9e0dfe issued_at=2026-03-11T19:44:52.162669+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4
+WDmKezDdm5NcvgCy5t2yFFnSv6s/a7m352FAe+clfiwkyJ4iHacYhG5auY6eL28qd5YtpbgekFSLPwWzBtzBCA==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/vision/SKILL.md",
+      "digest": {
+        "sha256": "9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.162559+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.162559+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "441e50e7ef9e0dfe",
+    "value": "untrusted comment: signature from omg local signing key\ndTSQxVBvp9hHUoZK2kuq6cRLbaP6TB9bSU5sDP5BkDjd6E3M4HTBUGe63va0ANRvkzsxRJOU3CSjbyymDvB3Bg==\ntrusted comment: type=omg-slsa-v1 keyid=441e50e7ef9e0dfe issued_at=2026-03-11T19:44:52.162669+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4\nWDmKezDdm5NcvgCy5t2yFFnSv6s/a7m352FAe+clfiwkyJ4iHacYhG5auY6eL28qd5YtpbgekFSLPwWzBtzBCA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=441e50e7ef9e0dfe issued_at=2026-03-11T19:44:52.162669+00:00 artifact=bundle/.agents/skills/omg/vision/SKILL.md sha256=9cd5405640edc6e80a8110234f59f6aeb197ececa37a145619d30083ee2263d4"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+XjKWSPaVnkdIVD5NjM0M8pM3Ai+r0+NPQ50C2DU7K44DK5BphzwXnUHZzq/Cxw1svEg0iDRfk3nnzSkMy7QwBQ==
+trusted comment: type=omg-slsa-v1 keyid=16f3436d68b7dda0 issued_at=2026-03-11T19:44:52.163339+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a
+dqfwc+rQZHLBvrGrYk0cj5cA3SCw3dUYSJlEUutTtNHFUOfNECQnhmhPeBFwQGDwKKYRWKQAbdgXPkwIYkxkCg==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/vision/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/vision/openai.yaml",
+      "digest": {
+        "sha256": "8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.163226+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.163226+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "16f3436d68b7dda0",
+    "value": "untrusted comment: signature from omg local signing key\nXjKWSPaVnkdIVD5NjM0M8pM3Ai+r0+NPQ50C2DU7K44DK5BphzwXnUHZzq/Cxw1svEg0iDRfk3nnzSkMy7QwBQ==\ntrusted comment: type=omg-slsa-v1 keyid=16f3436d68b7dda0 issued_at=2026-03-11T19:44:52.163339+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a\ndqfwc+rQZHLBvrGrYk0cj5cA3SCw3dUYSJlEUutTtNHFUOfNECQnhmhPeBFwQGDwKKYRWKQAbdgXPkwIYkxkCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=16f3436d68b7dda0 issued_at=2026-03-11T19:44:52.163339+00:00 artifact=bundle/.agents/skills/omg/vision/openai.yaml sha256=8a6f4e40c91ffff3686af47f6902043cf090df7afc530b052f1344efe9cc8e0a"
+  }
+}

package/dist/enterprise/attestations/bundle/.claude-plugin/marketplace.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+VCXaY6X8pKv6KvthU7bZnRqDhKcTKcmpC72dfV8DHfZmSrHLdnypz6wNKwy4E0FZoFzN76R6AOHMfTYljumLDQ==
+trusted comment: type=omg-slsa-v1 keyid=4becb89a4ccbdf49 issued_at=2026-03-11T19:44:52.163969+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778
+toF/9IIgW2YL0cj5aDoRV2FoBTldaPxZg1DQho8DnK6vMbFrUzNlIOsQ3ZdFBMX+QGa+DmRm0HxB1+jytW49BQ==

package/dist/enterprise/attestations/bundle/.claude-plugin/marketplace.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/marketplace.json",
+      "digest": {
+        "sha256": "ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.163854+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.163854+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "4becb89a4ccbdf49",
+    "value": "untrusted comment: signature from omg local signing key\nVCXaY6X8pKv6KvthU7bZnRqDhKcTKcmpC72dfV8DHfZmSrHLdnypz6wNKwy4E0FZoFzN76R6AOHMfTYljumLDQ==\ntrusted comment: type=omg-slsa-v1 keyid=4becb89a4ccbdf49 issued_at=2026-03-11T19:44:52.163969+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778\ntoF/9IIgW2YL0cj5aDoRV2FoBTldaPxZg1DQho8DnK6vMbFrUzNlIOsQ3ZdFBMX+QGa+DmRm0HxB1+jytW49BQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=4becb89a4ccbdf49 issued_at=2026-03-11T19:44:52.163969+00:00 artifact=bundle/.claude-plugin/marketplace.json sha256=ebb8154cf1af563739a6b82eb1ec8623b00e8da987505fb668bc51c970c46778"
+  }
+}

package/dist/enterprise/attestations/bundle/.claude-plugin/mcp.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+pC+MIPL8kOsecQRWbKAVT8HRwR9b09Yux1yGrDhznNHjqoxxV9J/1OunP7K0amEw0yC50ReUPpTegJq5W3bGCg==
+trusted comment: type=omg-slsa-v1 keyid=daa196e71474054b issued_at=2026-03-11T19:44:52.164553+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27
+y80qwi8ZsWVAyS1IguQOW3RObNruTBMatmbM5HUqwGfCU1SYgfFyEDFCRSFpEJJseEWE33ptRe6nGFP0G57mBA==

package/dist/enterprise/attestations/bundle/.claude-plugin/mcp.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/mcp.json",
+      "digest": {
+        "sha256": "14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.164444+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.164444+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "daa196e71474054b",
+    "value": "untrusted comment: signature from omg local signing key\npC+MIPL8kOsecQRWbKAVT8HRwR9b09Yux1yGrDhznNHjqoxxV9J/1OunP7K0amEw0yC50ReUPpTegJq5W3bGCg==\ntrusted comment: type=omg-slsa-v1 keyid=daa196e71474054b issued_at=2026-03-11T19:44:52.164553+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27\ny80qwi8ZsWVAyS1IguQOW3RObNruTBMatmbM5HUqwGfCU1SYgfFyEDFCRSFpEJJseEWE33ptRe6nGFP0G57mBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=daa196e71474054b issued_at=2026-03-11T19:44:52.164553+00:00 artifact=bundle/.claude-plugin/mcp.json sha256=14208140297f635cc5155cfe063c9b8a6193a3d0a264e0686cf3b80789208f27"
+  }
+}

package/dist/enterprise/attestations/bundle/.claude-plugin/plugin.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+T/6m7kh78H2ekUOrPCK0kee2Ld+hjuthnQiUoEU+oYuVfGtIsPBL+mLwp9mXi3pEiu6fxrXbD7fHXyX+VGTxDg==
+trusted comment: type=omg-slsa-v1 keyid=15aa5ed824c83612 issued_at=2026-03-11T19:44:52.165143+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966
+gT7WNQNMdeCYpoN4CXt+Srbc9LEGYhtD90tesnwmXbnyTdSLwBb9Am+AgBLMfdwb6fWRfPe5WGq9Zx9nc7NWBQ==

package/dist/enterprise/attestations/bundle/.claude-plugin/plugin.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.claude-plugin/plugin.json",
+      "digest": {
+        "sha256": "325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.165034+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.165034+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "15aa5ed824c83612",
+    "value": "untrusted comment: signature from omg local signing key\nT/6m7kh78H2ekUOrPCK0kee2Ld+hjuthnQiUoEU+oYuVfGtIsPBL+mLwp9mXi3pEiu6fxrXbD7fHXyX+VGTxDg==\ntrusted comment: type=omg-slsa-v1 keyid=15aa5ed824c83612 issued_at=2026-03-11T19:44:52.165143+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966\ngT7WNQNMdeCYpoN4CXt+Srbc9LEGYhtD90tesnwmXbnyTdSLwBb9Am+AgBLMfdwb6fWRfPe5WGq9Zx9nc7NWBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=15aa5ed824c83612 issued_at=2026-03-11T19:44:52.165143+00:00 artifact=bundle/.claude-plugin/plugin.json sha256=325eac02b6e9c00bde933c080095c127e142aaf78092c7659d13cb7f706a3966"
+  }
+}

package/dist/enterprise/attestations/bundle/.mcp.json.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+qkglSklq76lNxlebiDLq2bVxH15qi8DPTn9YFZdztsXuAe5cAemeotyvuz0x2fIsPeMs9wX/I8zgf6umh+vbDQ==
+trusted comment: type=omg-slsa-v1 keyid=5f0a523aeb8d9892 issued_at=2026-03-11T19:44:52.165792+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4
++j5VGytvERTn5pejPVvhnQn/64M/YKWIYgTmuuZVTD8HDllRdjmMaf06Y9JqWH3R3MmVKwMXksBfKZO0aB0MBA==

package/dist/enterprise/attestations/bundle/.mcp.json.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.mcp.json",
+      "digest": {
+        "sha256": "e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.165682+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.165682+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "5f0a523aeb8d9892",
+    "value": "untrusted comment: signature from omg local signing key\nqkglSklq76lNxlebiDLq2bVxH15qi8DPTn9YFZdztsXuAe5cAemeotyvuz0x2fIsPeMs9wX/I8zgf6umh+vbDQ==\ntrusted comment: type=omg-slsa-v1 keyid=5f0a523aeb8d9892 issued_at=2026-03-11T19:44:52.165792+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4\n+j5VGytvERTn5pejPVvhnQn/64M/YKWIYgTmuuZVTD8HDllRdjmMaf06Y9JqWH3R3MmVKwMXksBfKZO0aB0MBA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=5f0a523aeb8d9892 issued_at=2026-03-11T19:44:52.165792+00:00 artifact=bundle/.mcp.json sha256=e16897732dbd20ba7f47e5c0513b146a8d847454c8c13aa9e0a6031e5a498fa4"
+  }
+}

package/dist/enterprise/attestations/bundle/OMG_COMPAT_CONTRACT.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+JBYzPVAV2M2jZYMhyHgFFuN8BTJHvRv0PytHlRCqAA1JmISl4a3HX+YfcRJBQIELvMzhLBQ02JsnBEMFQmBnDg==
+trusted comment: type=omg-slsa-v1 keyid=b3d6ec4a2d8ff073 issued_at=2026-03-11T19:44:52.166426+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3
+WFB/2R/EEgXhD6tjgnl+tR3SVs4HhSYRQMYGUyJ9CX/gP7RGXfqIzPFG+Dskx7hs5GnM33Lfnq1fx/LWVmpIAA==

package/dist/enterprise/attestations/bundle/OMG_COMPAT_CONTRACT.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/OMG_COMPAT_CONTRACT.md",
+      "digest": {
+        "sha256": "1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.166314+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.166314+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "b3d6ec4a2d8ff073",
+    "value": "untrusted comment: signature from omg local signing key\nJBYzPVAV2M2jZYMhyHgFFuN8BTJHvRv0PytHlRCqAA1JmISl4a3HX+YfcRJBQIELvMzhLBQ02JsnBEMFQmBnDg==\ntrusted comment: type=omg-slsa-v1 keyid=b3d6ec4a2d8ff073 issued_at=2026-03-11T19:44:52.166426+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3\nWFB/2R/EEgXhD6tjgnl+tR3SVs4HhSYRQMYGUyJ9CX/gP7RGXfqIzPFG+Dskx7hs5GnM33Lfnq1fx/LWVmpIAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=b3d6ec4a2d8ff073 issued_at=2026-03-11T19:44:52.166426+00:00 artifact=bundle/OMG_COMPAT_CONTRACT.md sha256=1655c8df26a2abd48c306fa509b6b380b643df0cccfb7e5dbd19e16bf10fe8c3"
+  }
+}

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:code-review.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+fMthn0dZtgxi8qeKrhPV9zP4B4zlCWIFXP57ec7Genp38A5Ky/7yEFndI4BHIQXFZYl04c4XiOx1/d780sfUDw==
+trusted comment: type=omg-slsa-v1 keyid=295ac8706a2f603a issued_at=2026-03-11T19:44:52.167105+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0
+6SQQkTmtpETQEuS3bIF5Y0/45efMWHnSchzREJ3/KfwMGlDVBUMjJuEDCh7jtQ4EtZgd3FTJtDFQGqrlnsm3Ag==

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:code-review.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:code-review.md",
+      "digest": {
+        "sha256": "99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.166993+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.166993+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "295ac8706a2f603a",
+    "value": "untrusted comment: signature from omg local signing key\nfMthn0dZtgxi8qeKrhPV9zP4B4zlCWIFXP57ec7Genp38A5Ky/7yEFndI4BHIQXFZYl04c4XiOx1/d780sfUDw==\ntrusted comment: type=omg-slsa-v1 keyid=295ac8706a2f603a issued_at=2026-03-11T19:44:52.167105+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0\n6SQQkTmtpETQEuS3bIF5Y0/45efMWHnSchzREJ3/KfwMGlDVBUMjJuEDCh7jtQ4EtZgd3FTJtDFQGqrlnsm3Ag==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=295ac8706a2f603a issued_at=2026-03-11T19:44:52.167105+00:00 artifact=bundle/plugins/advanced/commands/OMG:code-review.md sha256=99ba9756586924d0ebdd43c4ca65f925b86f6c4bf6bc98d355f0cb9a17f9f6b0"
+  }
+}

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:deep-plan.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+6sgb/RYnuZMUYDYz9bQMTjTRwrFiIfwfqlrKio+f/ODQ3wY08OK2atDwCw13TUixKlsCKWRDUUw/Njbv2gyHBA==
+trusted comment: type=omg-slsa-v1 keyid=32069a4f71c8362e issued_at=2026-03-11T19:44:52.167770+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0
+S8u02pcCSdOi8syKk2KS/vD+VeDtcke9h29hlpK00Tp0ryfryBOG1Ye6Dy5rC+rfNAYc6520k0kf4TFq7jvPBQ==

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:deep-plan.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:deep-plan.md",
+      "digest": {
+        "sha256": "ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.167660+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.167660+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "32069a4f71c8362e",
+    "value": "untrusted comment: signature from omg local signing key\n6sgb/RYnuZMUYDYz9bQMTjTRwrFiIfwfqlrKio+f/ODQ3wY08OK2atDwCw13TUixKlsCKWRDUUw/Njbv2gyHBA==\ntrusted comment: type=omg-slsa-v1 keyid=32069a4f71c8362e issued_at=2026-03-11T19:44:52.167770+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0\nS8u02pcCSdOi8syKk2KS/vD+VeDtcke9h29hlpK00Tp0ryfryBOG1Ye6Dy5rC+rfNAYc6520k0kf4TFq7jvPBQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=32069a4f71c8362e issued_at=2026-03-11T19:44:52.167770+00:00 artifact=bundle/plugins/advanced/commands/OMG:deep-plan.md sha256=ccc235efa52643afd5550765bb0a3b9697be40bf4731392fde3f1c0e5c43f9e0"
+  }
+}

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:handoff.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+qzLB4ulVT2FXjWeJRMYwxIe/3FVAdQ6iZnnEIhRua3DIuqHOgmdZHwbGP2yG0ZYEPx3gyFTuaMZwee23HDs5AQ==
+trusted comment: type=omg-slsa-v1 keyid=9b8cdb23e871dd56 issued_at=2026-03-11T19:44:52.171125+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011
+IlAhAwNRP1YPCV8DBKJYdLWFPGQDUG2Dj/BDZjBF6LgJtUYOrklfd38i1xmf85ocI9ugqOJua8JiPUZBLJcgAA==

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:handoff.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:handoff.md",
+      "digest": {
+        "sha256": "eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.169805+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.169805+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "9b8cdb23e871dd56",
+    "value": "untrusted comment: signature from omg local signing key\nqzLB4ulVT2FXjWeJRMYwxIe/3FVAdQ6iZnnEIhRua3DIuqHOgmdZHwbGP2yG0ZYEPx3gyFTuaMZwee23HDs5AQ==\ntrusted comment: type=omg-slsa-v1 keyid=9b8cdb23e871dd56 issued_at=2026-03-11T19:44:52.171125+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011\nIlAhAwNRP1YPCV8DBKJYdLWFPGQDUG2Dj/BDZjBF6LgJtUYOrklfd38i1xmf85ocI9ugqOJua8JiPUZBLJcgAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9b8cdb23e871dd56 issued_at=2026-03-11T19:44:52.171125+00:00 artifact=bundle/plugins/advanced/commands/OMG:handoff.md sha256=eea0da517e14abb0a9bc6fe661f310a81c0282ff666803da4ae1be47fb597011"
+  }
+}

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:learn.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+P0DqQq3jHr7jejJNCdIm9Vgc/fMNhpvtZQloTlOyCAsf9EEOpqFr/EGdAnAkBFAjtt1bEZvGJAXAT96zAn+HDw==
+trusted comment: type=omg-slsa-v1 keyid=85331ac756ca8cd5 issued_at=2026-03-11T19:44:52.172009+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3
+5JkgkvjcupOYCfZ+NOd8Rgizt4wnxJqOifLY1SjJiSLTqtesoyMUV2NcwwAucsJ1sUZ2X4F+T2d4lWA+aKaNBw==

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:learn.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/plugins/advanced/commands/OMG:learn.md",
+      "digest": {
+        "sha256": "338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-11T19:44:52.171880+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-11T19:44:52.171880+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "85331ac756ca8cd5",
+    "value": "untrusted comment: signature from omg local signing key\nP0DqQq3jHr7jejJNCdIm9Vgc/fMNhpvtZQloTlOyCAsf9EEOpqFr/EGdAnAkBFAjtt1bEZvGJAXAT96zAn+HDw==\ntrusted comment: type=omg-slsa-v1 keyid=85331ac756ca8cd5 issued_at=2026-03-11T19:44:52.172009+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3\n5JkgkvjcupOYCfZ+NOd8Rgizt4wnxJqOifLY1SjJiSLTqtesoyMUV2NcwwAucsJ1sUZ2X4F+T2d4lWA+aKaNBw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=85331ac756ca8cd5 issued_at=2026-03-11T19:44:52.172009+00:00 artifact=bundle/plugins/advanced/commands/OMG:learn.md sha256=338f87222db65114f8c83de2185a21c7c2538832395524ac39ea38a0e09d73b3"
+  }
+}

package/dist/enterprise/attestations/bundle/plugins/advanced/commands/OMG:maintainer.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+1NFpR44Pgn6H0VuAJOh0SWnLgnZKOBJLIwRE5+p5vmM3I1/YfcR/38NETTR1tS8ujHFQzqgjK0WLjDov6RVFDA==
+trusted comment: type=omg-slsa-v1 keyid=b2d21bad7c6c8d32 issued_at=2026-03-11T19:44:52.172696+00:00 artifact=bundle/plugins/advanced/commands/OMG:maintainer.md sha256=1a29d4cb6839dd6de8c11b88b93a72fb9a371cfb7784bfe409d5e5ef0a825508
+l5kIKClf0zZ94qKVv1qKrw7hSVrCZy2vXTh5kyl3Fa6MrHIxNQY1uQrF4ZLp9X7CnjzEJQzSIkX66FlvgrgpAw==